fatback - Undelete files from FAT file systems

License:

GPL

Vendor:

cert.org

Description:

Fatback is a forensic tool for undeleting files from Microsoft FAT
file systems. Fatback is different from other undelete tools in that
it does the following:
* Runs under UNIX environments (only Linux and FreeBSD tested so far)
* Can undelete files automatically
* Supports Long File Names
* Supports FAT12, FAT16, and FAT32
* Powerful interactive mode
* Recursively undeletes deleted directories
* Recovers lost cluster chains
* Works with single partitions or whole disks
Fatback was developed by the U.S. Department of Defense Computer
Forensics Laboratory (<http://www.dcfl.gov>) and is authorized for
*government and law enforcement use only*.